141.212.122.102

Basic Info

City: Ypsilanti

Region: Michigan

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
141.212.122.136	attackspam	firewall-block, port(s): 61841/tcp	2020-02-23 15:09:57
141.212.122.137	attackbotsspam	Feb 23 05:56:43 debian-2gb-nbg1-2 kernel: \[4693007.577083\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=141.212.122.137 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=54321 PROTO=TCP SPT=45392 DPT=63029 WINDOW=65535 RES=0x00 SYN URGP=0	2020-02-23 14:06:15
141.212.122.137	attack	firewall-block, port(s): 41145/tcp	2020-02-23 08:20:54
141.212.122.141	attackbotsspam	firewall-block, port(s): 34369/tcp	2020-02-23 04:17:16
141.212.122.177	attackspam	12422/tcp 12422/tcp [2020-02-22]2pkt	2020-02-23 01:54:47
141.212.122.187	attack	8013/tcp 8013/tcp [2020-02-22]2pkt	2020-02-23 01:53:52
141.212.122.197	attack	10028/tcp 10028/tcp [2020-02-22]2pkt	2020-02-23 01:53:02
141.212.122.207	attack	8030/tcp 8030/tcp [2020-02-22]2pkt	2020-02-23 01:51:37
141.212.122.217	attackspambots	8091/tcp 8091/tcp [2020-02-22]2pkt	2020-02-23 01:50:19

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.212.122.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37252
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;141.212.122.102.		IN	A

;; AUTHORITY SECTION:
.			196	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062100 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 21 17:35:41 CST 2022
;; MSG SIZE  rcvd: 108

Host info

102.122.212.141.in-addr.arpa domain name pointer researchscan357.eecs.umich.edu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.122.212.141.in-addr.arpa	name = researchscan357.eecs.umich.edu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.172.201.148	attackspam	Brute force attempt	2019-11-12 15:26:10
185.176.27.178	attackbots	Nov 12 08:35:25 h2177944 kernel: \[6419669.418683\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47231 PROTO=TCP SPT=44245 DPT=27746 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 08:35:40 h2177944 kernel: \[6419684.824082\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=2033 PROTO=TCP SPT=44245 DPT=52569 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 08:36:30 h2177944 kernel: \[6419733.890504\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46958 PROTO=TCP SPT=44245 DPT=18980 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 08:36:45 h2177944 kernel: \[6419749.684847\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=18724 PROTO=TCP SPT=44245 DPT=48423 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 12 08:37:20 h2177944 kernel: \[6419784.279019\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.2	2019-11-12 15:52:18
149.202.206.206	attackspam	Nov 12 08:53:05 vps691689 sshd[29054]: Failed password for root from 149.202.206.206 port 36091 ssh2 Nov 12 08:56:23 vps691689 sshd[29072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206 ...	2019-11-12 16:01:43
41.242.1.163	attack	WordPress login Brute force / Web App Attack on client site.	2019-11-12 15:28:34
193.32.160.152	attack	Nov 12 07:32:32 relay postfix/smtpd\[27999\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 12 07:32:32 relay postfix/smtpd\[27999\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 12 07:32:32 relay postfix/smtpd\[27999\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 12 07:32:32 relay postfix/smtpd\[27999\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\	2019-11-12 15:23:48
211.110.140.200	attackspam	Nov 12 08:09:02 vmd17057 sshd\[10980\]: Invalid user oracle4 from 211.110.140.200 port 48640 Nov 12 08:09:02 vmd17057 sshd\[10980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.110.140.200 Nov 12 08:09:03 vmd17057 sshd\[10980\]: Failed password for invalid user oracle4 from 211.110.140.200 port 48640 ssh2 ...	2019-11-12 15:55:47
85.128.142.137	attack	Automatic report - XMLRPC Attack	2019-11-12 15:47:20
139.59.75.53	attackspam	139.59.75.53 - - [12/Nov/2019:07:39:21 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.75.53 - - [12/Nov/2019:07:39:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.75.53 - - [12/Nov/2019:07:39:33 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.75.53 - - [12/Nov/2019:07:39:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.75.53 - - [12/Nov/2019:07:39:40 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.75.53 - - [12/Nov/2019:07:39:46 +0100] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-11-12 15:41:56
47.92.99.140	attackbots	fail2ban honeypot	2019-11-12 15:50:04
110.47.218.84	attackbots	$f2bV_matches	2019-11-12 15:26:22
194.113.107.116	attackbots	Nov 12 12:20:51 gw1 sshd[7055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.113.107.116 Nov 12 12:20:53 gw1 sshd[7055]: Failed password for invalid user lisa from 194.113.107.116 port 52420 ssh2 ...	2019-11-12 15:40:04
45.143.221.15	attack	\[2019-11-12 02:36:24\] NOTICE\[2601\] chan_sip.c: Registration from '"9000" \' failed for '45.143.221.15:5602' - Wrong password \[2019-11-12 02:36:24\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-12T02:36:24.252-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9000",SessionID="0x7fdf2c5b06b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.15/5602",Challenge="72469f24",ReceivedChallenge="72469f24",ReceivedHash="6544fd04bb328a5da3af38a938abd479" \[2019-11-12 02:36:24\] NOTICE\[2601\] chan_sip.c: Registration from '"9000" \' failed for '45.143.221.15:5602' - Wrong password \[2019-11-12 02:36:24\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-12T02:36:24.383-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9000",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-11-12 15:51:04
106.12.13.247	attackspambots	Nov 11 21:20:58 eddieflores sshd\[3600\]: Invalid user testtest from 106.12.13.247 Nov 11 21:20:58 eddieflores sshd\[3600\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247 Nov 11 21:21:00 eddieflores sshd\[3600\]: Failed password for invalid user testtest from 106.12.13.247 port 55736 ssh2 Nov 11 21:26:00 eddieflores sshd\[4019\]: Invalid user 12345 from 106.12.13.247 Nov 11 21:26:00 eddieflores sshd\[4019\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247	2019-11-12 15:35:29
110.39.192.114	attackspambots	Unauthorised access (Nov 12) SRC=110.39.192.114 LEN=52 TTL=114 ID=32518 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-12 15:44:10
210.212.145.125	attackspambots	2019-11-12T07:35:42.567745abusebot-5.cloudsearch.cf sshd\[11921\]: Invalid user russel from 210.212.145.125 port 27473	2019-11-12 15:56:10

Recently Reported IPs

39.76.127.181	106.11.158.41	137.226.250.153	137.226.52.85
137.226.54.184	58.205.90.240	137.226.14.136	144.55.149.221
137.226.52.229	137.226.15.56	137.226.190.78	101.158.195.0
177.10.202.84	187.224.15.7	137.226.69.193	138.203.193.42
137.226.252.146	137.226.13.201	137.226.14.56	169.229.56.8